last executing test programs: 6m52.648862785s ago: executing program 2 (id=121): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) r0 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0x20}, 0x0, 0xe3d08660d3cd4684}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x8041, 0x50) 6m52.336009006s ago: executing program 2 (id=123): socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=ANY=[@ANYBLOB="3300000037000101fcff0700040000000100000008006a80040010800c0002000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0xe, 0xa, 0x1, "020000000000005525052e8bd9e6660201000000000000000000000200", 0x3231564e}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r2, r1, 0x0, 0x7ffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x7, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09020200908f10cc7344d080e66b75998eca3d70eaf308cd83a9a135096dba5ab7173102ee20924a32fbb5de3bd77f75fad03676c2435bcb5b49f996ee4e9e48e4a7220ac4be79a1c25b07615801770c52903c848dd0fba098be3c0ba2056a9558b7a025b01b9661dfb9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="020000000100"/28], 0x50) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in=@empty, 0x0, 0x0, 0x4e23, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x200, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x33}, 0x0, @in6=@empty, 0x1, 0x0, 0x2, 0x7, 0x6, 0x0, 0x10000}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffe0) 6m49.884973168s ago: executing program 2 (id=130): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000104c02000500070000000709022400010000000009f5fa407983500a77757003dc2caf90d52dfe95b364233103fb6a08f0d0c03664092100000001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x7, "8ef8"}, @global=@item_012={0x1, 0x1, 0x1, "9d"}, @main=@item_012={0x2, 0x0, 0x9, "04fd"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000104c02000500070000000709022400010000000009f5fa407983500a77757003dc2caf90d52dfe95b364233103fb6a08f0d0c03664092100000001"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x7, "8ef8"}, @global=@item_012={0x1, 0x1, 0x1, "9d"}, @main=@item_012={0x2, 0x0, 0x9, "04fd"}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 6m45.732776148s ago: executing program 2 (id=141): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x53) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_FLOW={0x8, 0xb, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000280)={0x9}) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) (async) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) (async) writev(r5, &(0x7f0000000640)=[{&(0x7f0000000300)="9745605805f0766b", 0x8}], 0x1) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000440)={@remote, @local, 0x0, "ab4a10dea6d88f680c032dd66fee2b7ae807e269061c1616d297cb53005aca18", 0x400, 0x8, 0x3, 0x6}, 0x3c) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINK={0x8}]}, 0x28}}, 0x4000) 6m42.320602112s ago: executing program 2 (id=147): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000000200)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x14, 0x3f, 0x200, 0x2, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}}, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000400)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x70) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r9}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x88d, &(0x7f00000004c0)={0x0, 0xcfe8, 0x0, 0xffffffff, 0x11e}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) 6m41.288327709s ago: executing program 2 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000090c33f40189a7ef6185ccccd807b1fc5d60bf70a0101622d000000010990ef02120001000000b81b324962c7bb0d5200"], 0x0) 6m26.112299185s ago: executing program 32 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000090c33f40189a7ef6185ccccd807b1fc5d60bf70a0101622d000000010990ef02120001000000b81b324962c7bb0d5200"], 0x0) 12.536436727s ago: executing program 4 (id=1189): mount$tmpfs(0x0, 0x0, 0x0, 0x1000040, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) 10.611325966s ago: executing program 3 (id=1197): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x60b, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10.532771849s ago: executing program 4 (id=1198): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000240)='ns/ipc\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x301300, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000340)={0xc}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) 10.044625547s ago: executing program 4 (id=1200): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xa}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x4008000) shutdown(r0, 0x1) 9.920117365s ago: executing program 0 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getcwd(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) 8.892438854s ago: executing program 1 (id=1202): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x7, 0x1) syz_open_procfs(0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) 8.858783252s ago: executing program 4 (id=1203): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "186363cf379caf54bf000000c0de7af30e90937920fcba13d90a86cfeaa44d66a6535daf1bc31018407ad88f8d250600", 0x15}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) 7.872922879s ago: executing program 4 (id=1205): syz_open_dev$dri(0x0, 0x1, 0x0) socket(0x15, 0x2, 0xd) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048880}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4a7846d3a8eff9c4}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 7.851301447s ago: executing program 0 (id=1206): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 7.747774922s ago: executing program 1 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 6.876853247s ago: executing program 1 (id=1209): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 6.042713447s ago: executing program 3 (id=1212): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x7, 0xd357, {{0x5, 0x4, 0x3, 0x2d, 0x14, 0x66, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 5.538579125s ago: executing program 5 (id=1213): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc26080b) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) 5.031942778s ago: executing program 0 (id=1214): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) 4.960696471s ago: executing program 3 (id=1215): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0x3, 0x20800006, 0xa, 0xfbffffcf, 0x7, "65bd218c5fe001cafd41f5c2a95eec23bd62f8", 0x5, 0xe}) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 4.914706395s ago: executing program 5 (id=1216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) 4.852055919s ago: executing program 0 (id=1217): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 4.212762264s ago: executing program 5 (id=1218): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800020d8}, 0x94) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r0, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) write$6lowpan_control(r1, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 4.197597706s ago: executing program 0 (id=1219): syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r1 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x131a, 0x10100}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) read$FUSE(r5, &(0x7f0000002280)={0x2020}, 0x2020) futex(&(0x7f0000000240)=0x1, 0xc, 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)=0x1, 0x2) inotify_rm_watch(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r7, r2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffd27, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) 4.066520521s ago: executing program 3 (id=1220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x45, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() add_key$fscrypt_v1(&(0x7f0000000480), 0x0, &(0x7f0000000500)={0x0, "6a8a53f23af8fe18db314e60b2ddf1c85fb1ee69665e9c75e894eee4cac50e669c81042d5eab7a08c35390bd51b8b86fc34affb176bba090aff137d2370b6bc4", 0x1c}, 0x48, 0xfffffffffffffffd) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffff8, @loopback, 0x4}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000800000100100000100"/24], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x28, r9, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '#).-!'}]}, 0x28}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) 3.932246722s ago: executing program 5 (id=1221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') 2.371884693s ago: executing program 3 (id=1222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}, 0x4}], 0x1, 0x2, 0x0) shutdown(r3, 0x1) 2.317355417s ago: executing program 1 (id=1223): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$can_raw(0x1d, 0x3, 0x1) fsopen(0x0, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) accept(r2, 0x0, 0x0) 2.292005797s ago: executing program 5 (id=1224): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0x89) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@index_off}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r1, &(0x7f00000001c0)='./bus\x00', 0x800, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7fff}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000004240)=0x40000006, 0x4) recvmsg(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000040)}, 0x18143) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="66013d", @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000000080)={0x20, 0x0, r4, {0x7, 0x0, 0x2, 0x9}}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid']) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, &(0x7f0000000340)) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) chdir(&(0x7f0000000140)='./bus\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="380000002100010069bd7000fcdbdf250a20200cfd00000500000000050015000100000014000100ff01"], 0x38}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001a00010025bd7000fddbdf250a102006fc02fd0500310000080003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2.248953743s ago: executing program 0 (id=1225): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000080)={&(0x7f0000000180)={{@host}, {@hyper, 0x2}, 0x400, "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"}, 0x418, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getuid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xf8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc8, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x6, 0x1, 0xf, 0x3, 0x9, 0x8, 0x4, 0x9, 0x2, 0x8, 0xd, 0x4, 0x5, 0x3, 0xa, 0x2], 0x0, [0x8, 0x8, 0x4, 0x5, 0x2, 0x9, 0x3096, 0x1a32, 0x3463, 0x1, 0xe1, 0x180, 0x1ff, 0xba, 0x81d, 0x7fff], [0x4005, 0x1, 0x6, 0x9, 0x0, 0x8, 0x31c, 0x100, 0x9, 0x1, 0x1ff, 0x7, 0x3, 0xe1, 0x3, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x3ff}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0xd, 0x9, 0x7, 0xd, 0x7, 0x10, 0xc, 0xc, 0x7, 0x3, 0x4, 0x6, 0x1, 0x0, 0x4], 0x1, [0x65, 0x1000, 0x7, 0x2, 0x5155, 0x9, 0xfffe, 0x200, 0xfff4, 0x9, 0x8, 0x40, 0xfff2, 0x38, 0x5, 0x6], [0x2, 0x7f, 0x1, 0x8, 0xaab4, 0x9, 0x0, 0x1, 0x62, 0x2, 0xcde, 0x5, 0x1, 0xb, 0x3, 0xe]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0xf8}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x16}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4014) 1.152054895s ago: executing program 1 (id=1226): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0xa, 0x1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x7b0, 0x120, 0x568, 0x420, 0x568, 0x568, 0x6e0, 0x6e0, 0x6e0, 0x6e0, 0x6e0, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@mcast2}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x810) sendto$inet6(r1, &(0x7f0000000080)="535ec5637c1d584f210ec8c50b445eeaa9b38da8a1332c5a7bba4f0f4ac97ecc2ad57487637d9f62606d6de6c7a8c409fb73b6c905f600b0172edacd0966897480ad6d67a20d1791f48b2482c060e10ab5b796", 0x53, 0x8001, 0x0, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1c000000180081064e81f782db4cb904231d0800fe007c05e8fe55a1", 0x1c}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000001c0)={0x9, 0x1, 0x0, "167e94e3cbad028b080b539d0b6723df0f531c39546c4793d1e0d12c5a9af456"}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000810003c3bfa300000000000007030000f0ffffff720af1fff8ffffff71a4f0ff0000000065040200000000ff2d400400000000003400000001ede4ff7b1300ff000000001d440100000000007a0af0ff00ffffffdb030000a1000000b500f7ff350900009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4fc2495f74baaa876156de9078d687348ef1e50becb19bc461e94f4061cff1db39271a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cd90eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a950812d7aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031bc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d86047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a97429ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10ef454c7702c98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad801800"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f00000002c0)={0x6, 0x1}) 1.151288082s ago: executing program 3 (id=1227): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x9, @local, @rand_addr=' \x01\x00', 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x4, 0xfd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x96}, 0xe) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x2) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x101603) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', r3, 0x700, 0x7800, 0xaa, 0x8, {{0xf, 0x4, 0x2, 0x4, 0x3c, 0x66, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@noop, @timestamp_addr={0x44, 0x24, 0xb7, 0x1, 0x7, [{@private=0xa010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@local, 0x9}, {@multicast2}]}]}}}}}) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000180)) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r8 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000400)=0x5, 0x4) 996.204368ms ago: executing program 4 (id=1228): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x4, 0x0, 0xfffffff7ffffeffe, 0xfffffffc}, 0x0) getpgid(0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 756.403615ms ago: executing program 5 (id=1229): openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0x10000, 0x65c, 0x3ff, 0x10004, 0x1000800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$rtc(&(0x7f0000000500), 0xd2a, 0x80) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$RTC_PIE_ON(r3, 0x7005) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000eda000000000000087c1dbb54732720b8995"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa2092a, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 0s ago: executing program 1 (id=1230): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x383, 0x1ac) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getxattr(0x0, &(0x7f0000000340)=@known='security.apparmor\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) getdents64(r3, &(0x7f0000000300)=""/152, 0x98) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) r7 = dup3(r5, r2, 0x80000) ioctl$NBD_DO_IT(r7, 0xab03) kernel console output (not intermixed with test programs): [ 264.556497][ T7701] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 264.556531][ T7701] bpf_prog_alloc+0x3c/0x1a0 [ 264.556563][ T7701] bpf_prog_load+0x735/0x1930 [ 264.556604][ T7701] ? __pfx_bpf_prog_load+0x10/0x10 [ 264.556657][ T7701] ? bpf_lsm_bpf+0x9/0x20 [ 264.556678][ T7701] ? security_bpf+0x7e/0x300 [ 264.556703][ T7701] __sys_bpf+0x5f1/0x860 [ 264.556732][ T7701] ? __pfx___sys_bpf+0x10/0x10 [ 264.556773][ T7701] ? ksys_write+0x22a/0x250 [ 264.556794][ T7701] ? __pfx_ksys_write+0x10/0x10 [ 264.556808][ T7701] ? rcu_is_watching+0x15/0xb0 [ 264.556837][ T7701] __x64_sys_bpf+0x7c/0x90 [ 264.556862][ T7701] do_syscall_64+0xfa/0x3b0 [ 264.556883][ T7701] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.556902][ T7701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.556921][ T7701] ? clear_bhb_loop+0x60/0xb0 [ 264.556944][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.556962][ T7701] RIP: 0033:0x7ff41358ebe9 [ 264.556979][ T7701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.556995][ T7701] RSP: 002b:00007ff4117f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.557015][ T7701] RAX: ffffffffffffffda RBX: 00007ff4137b5fa0 RCX: 00007ff41358ebe9 [ 264.557029][ T7701] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 264.557041][ T7701] RBP: 00007ff4117f6090 R08: 0000000000000000 R09: 0000000000000000 [ 264.557053][ T7701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.557064][ T7701] R13: 00007ff4137b6038 R14: 00007ff4137b5fa0 R15: 00007ffdb9b6d518 [ 264.557095][ T7701] [ 264.557115][ T7701] Mem-Info: [ 264.869165][ T7701] active_anon:260 inactive_anon:4589 isolated_anon:0 [ 264.869165][ T7701] active_file:5890 inactive_file:37165 isolated_file:0 [ 264.869165][ T7701] unevictable:777 dirty:612 writeback:512 [ 264.869165][ T7701] slab_reclaimable:10356 slab_unreclaimable:101469 [ 264.869165][ T7701] mapped:34762 shmem:1371 pagetables:1220 [ 264.869165][ T7701] sec_pagetables:0 bounce:0 [ 264.869165][ T7701] kernel_misc_reclaimable:0 [ 264.869165][ T7701] free:1311749 free_pcp:15183 free_cma:0 [ 264.875793][ T9] usb 2-1: SerialNumber: syz [ 265.142066][ T7701] Node 0 active_anon:1040kB inactive_anon:41260kB active_file:23412kB inactive_file:148660kB unevictable:1572kB isolated(anon):0kB isolated(file):0kB mapped:162048kB dirty:2452kB writeback:2048kB shmem:26828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12572kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.763779][ T9] usb 2-1: config 0 descriptor?? [ 265.861839][ T7701] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.893339][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.019386][ T7723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.167365][ T7701] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.173088][ T9] usb 2-1: selecting invalid altsetting 0 [ 266.196230][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.266363][ T7701] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 266.272201][ T7701] Node 0 DMA32 free:1318592kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1036kB inactive_anon:29716kB active_file:23688kB inactive_file:146544kB unevictable:1572kB writepending:4508kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:48564kB local_pcp:23560kB free_cma:0kB [ 266.304882][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.473785][ T7701] lowmem_reserve[]: 0 0 1 1 1 [ 266.524055][ T9] usb 2-1: USB disconnect, device number 6 [ 266.525885][ T7701] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 266.731938][ T7701] lowmem_reserve[]: 0 0 0 0 0 [ 266.740378][ T7701] Node 1 Normal free:3896908kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18752kB local_pcp:13280kB free_cma:0kB [ 266.771696][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.841492][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 267.760876][ T7701] lowmem_reserve[]: 0 0 0 0 0 [ 267.765661][ T7701] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 268.051600][ T7701] Node 0 DMA32: 1108*4kB (UME) 775*8kB (UME) 232*16kB (UME) 91*32kB (UME) 36*64kB (UME) 74*128kB (UME) 28*256kB (UM) 17*512kB (UME) 7*1024kB (UME) 3*2048kB (UM) 313*4096kB (M) = 1340264kB [ 268.154496][ T7701] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 268.214080][ T7701] Node 1 Normal: 189*4kB (UM) 45*8kB (UME) 35*16kB (UME) 114*32kB (UME) 40*64kB (UME) 9*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3896908kB [ 268.401153][ T7745] xt_hashlimit: max too large, truncated to 1048576 [ 270.065406][ T7701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.167195][ T7701] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.162712][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 271.459119][ T7701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.738855][ T7701] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.776325][ T1212] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 271.968631][ T7701] 43413 total pagecache pages [ 271.973887][ T7701] 0 pages in swap cache [ 271.985831][ T7701] Free swap = 124996kB [ 271.995094][ T7701] Total swap = 124996kB [ 271.999596][ T7701] 2097051 pages RAM [ 272.016012][ T7701] 0 pages HighMem/MovableOnly [ 272.030256][ T7701] 424695 pages reserved [ 272.052921][ T7701] 0 pages cma reserved [ 274.616822][ T7774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.635779][ T5916] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 275.669629][ T5924] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 276.035273][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.242167][ T5924] usb 2-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 276.356921][ T5924] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 276.385976][ T5924] usb 2-1: config 1 has no interface number 1 [ 276.413726][ T5924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.424134][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.446203][ T5924] usb 2-1: Product: syz [ 276.450423][ T5924] usb 2-1: Manufacturer: syz [ 276.455034][ T5924] usb 2-1: SerialNumber: syz [ 276.492416][ T5916] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 276.512921][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 276.524293][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 276.535218][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 276.575964][ T5916] usb 4-1: Product: syz [ 276.580225][ T5916] usb 4-1: Manufacturer: syz [ 276.586813][ T5916] usb 4-1: SerialNumber: syz [ 276.594576][ T5916] usb 4-1: config 0 descriptor?? [ 276.664475][ T7791] netlink: 104 bytes leftover after parsing attributes in process `syz.0.471'. [ 276.678444][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'. [ 276.778500][ T5916] usb 4-1: selecting invalid altsetting 0 [ 278.023765][ T5924] usb 2-1: USB disconnect, device number 8 [ 279.683360][ T9] usb 4-1: USB disconnect, device number 12 [ 280.876561][ T5853] Bluetooth: hci5: link tx timeout [ 280.881745][ T5853] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 281.961878][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 283.000620][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 283.145805][ T5984] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 283.285976][ T5984] usb 4-1: device descriptor read/64, error -71 [ 283.385835][ T5916] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 283.694287][ T5916] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 283.705201][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 284.021536][ T5984] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 284.122871][ T5916] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.132454][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 284.140960][ T5916] usb 1-1: Product: syz [ 284.145279][ T5916] usb 1-1: Manufacturer: syz [ 284.150232][ T5916] usb 1-1: SerialNumber: syz [ 284.163307][ T5916] usb 1-1: config 0 descriptor?? [ 284.183645][ T5916] usb 1-1: selecting invalid altsetting 0 [ 284.255980][ T5984] usb 4-1: device descriptor read/64, error -71 [ 284.415048][ T5984] usb usb4-port1: attempt power cycle [ 284.605967][ T7841] netlink: 'syz.5.479': attribute type 1 has an invalid length. [ 284.613667][ T7841] netlink: 128 bytes leftover after parsing attributes in process `syz.5.479'. [ 284.622941][ T7841] netlink: 'syz.5.479': attribute type 2 has an invalid length. [ 284.630907][ T7841] netlink: 'syz.5.479': attribute type 1 has an invalid length. [ 284.787176][ T5984] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 284.845088][ T5984] usb 4-1: device descriptor read/8, error -71 [ 285.358290][ T5984] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 285.416766][ T5984] usb 4-1: device descriptor read/8, error -71 [ 285.534924][ T7868] pim6reg: entered allmulticast mode [ 285.559690][ T5984] usb usb4-port1: unable to enumerate USB device [ 285.608508][ T7872] xt_connbytes: Forcing CT accounting to be enabled [ 285.656109][ T7872] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 286.192691][ T5916] usb 1-1: USB disconnect, device number 16 [ 288.167705][ T7901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.534066][ T7903] binder: BINDER_SET_CONTEXT_MGR already set [ 288.540414][ T7903] binder: 7897:7903 ioctl 4018620d 200000000040 returned -16 [ 289.704747][ T30] audit: type=1326 audit(1755901225.555:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7885 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41358ebe9 code=0x7fc00000 [ 290.587555][ T7925] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 290.595961][ T5924] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 290.753854][ T7926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'. [ 290.763007][ T7926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.508'. [ 290.790852][ T5924] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 290.814032][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 290.826836][ T7926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'. [ 290.855581][ T5924] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 290.892763][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 290.917240][ T5924] usb 4-1: Product: syz [ 290.940827][ T5924] usb 4-1: Manufacturer: syz [ 290.970654][ T5924] usb 4-1: SerialNumber: syz [ 291.145766][ T5916] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 291.840389][ T5924] usb 4-1: config 0 descriptor?? [ 291.895357][ T5924] usb 4-1: selecting invalid altsetting 0 [ 291.965797][ T5916] usb 5-1: device descriptor read/64, error -71 [ 292.285991][ T5916] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 292.293892][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 292.465976][ T5916] usb 5-1: device descriptor read/64, error -71 [ 292.485793][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 292.494493][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.505858][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.517966][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.532182][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 292.541798][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.552559][ T9] usb 6-1: config 0 descriptor?? [ 292.578349][ T5916] usb usb5-port1: attempt power cycle [ 292.834482][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 292.862281][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 292.915500][ T9] usb 6-1: USB disconnect, device number 4 [ 292.945793][ T5916] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 292.977555][ T5916] usb 5-1: device descriptor read/8, error -71 [ 293.296516][ T5916] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 293.386897][ T5984] usb 4-1: USB disconnect, device number 17 [ 293.435575][ T5916] usb 5-1: device descriptor read/8, error -71 [ 293.571046][ T5916] usb usb5-port1: unable to enumerate USB device [ 297.533545][ T7987] syz.4.522: attempt to access beyond end of device [ 297.533545][ T7987] loop9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 297.546674][ T7987] SQUASHFS error: Failed to read block 0x0: -5 [ 297.639190][ T7989] syz.3.523: attempt to access beyond end of device [ 297.639190][ T7989] loop7: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 297.652312][ T7989] SQUASHFS error: Failed to read block 0x0: -5 [ 298.008830][ T7987] binder: 7986:7987 ioctl 4018620d 0 returned -22 [ 298.069540][ T7990] binder: 7988:7990 ioctl 4018620d 0 returned -22 [ 298.275820][ T1212] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 298.301832][ T5853] Bluetooth: hci1: unexpected event for opcode 0x2064 [ 298.309884][ T5853] Bluetooth: hci1: unexpected event for opcode 0x2064 [ 298.510002][ T1212] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 298.522790][ T1212] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.535824][ T1212] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 298.545234][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 298.553948][ T1212] usb 2-1: Product: syz [ 298.558607][ T1212] usb 2-1: Manufacturer: syz [ 298.563514][ T1212] usb 2-1: SerialNumber: syz [ 298.573053][ T1212] usb 2-1: config 0 descriptor?? [ 298.596553][ T1212] usb 2-1: selecting invalid altsetting 0 [ 301.072387][ T5924] usb 2-1: USB disconnect, device number 9 [ 301.195075][ T8026] netlink: 'syz.1.532': attribute type 30 has an invalid length. [ 302.371166][ T8036] block device autoloading is deprecated and will be removed. [ 302.825779][ T5916] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 302.928360][ T8058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.019607][ T5916] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 303.032246][ T5916] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 303.078052][ T5916] usb 1-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=b5.17 [ 303.223069][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.235786][ T5916] usb 1-1: Product: syz [ 303.240039][ T5916] usb 1-1: Manufacturer: syz [ 303.281485][ T5916] usb 1-1: SerialNumber: syz [ 303.794069][ T5916] usb 1-1: active config #6 != 1 ?? [ 303.806335][ T5916] usb 1-1: USB disconnect, device number 17 [ 304.131409][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.549'. [ 304.147566][ T8087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.166761][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.5.549'. [ 304.463489][ T8096] random: crng reseeded on system resumption [ 304.610799][ T8093] netlink: 52 bytes leftover after parsing attributes in process `syz.3.551'. [ 305.426640][ T5916] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 305.985363][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.985958][ T8123] tipc: Started in network mode [ 306.010278][ T8123] tipc: Node identity 5e0aaed357e9, cluster identity 4711 [ 306.018006][ T8123] tipc: Enabled bearer , priority 0 [ 306.023949][ T5916] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 306.031810][ T8123] syzkaller0: entered promiscuous mode [ 306.043005][ T8123] syzkaller0: entered allmulticast mode [ 306.050569][ T5916] usb 4-1: can't read configurations, error -71 [ 306.055410][ T8123] veth1_macvtap: mtu greater than device maximum [ 306.424200][ T8122] tipc: Resetting bearer [ 307.105816][ T9] tipc: Node number set to 165916371 [ 307.117986][ T8122] tipc: Disabling bearer [ 307.425867][ T5917] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 307.875993][ T5916] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 307.998066][ T8151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.169795][ T5917] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 308.196640][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.212386][ T5916] usb 2-1: config 7 has an invalid interface number: 192 but max is 0 [ 308.224143][ T5917] usb 1-1: Product: syz [ 308.240692][ T5917] usb 1-1: Manufacturer: syz [ 308.249821][ T5916] usb 2-1: config 7 has no interface number 0 [ 308.250795][ T5917] usb 1-1: SerialNumber: syz [ 308.266126][ T5916] usb 2-1: config 7 interface 192 has no altsetting 0 [ 308.285115][ T5917] usb 1-1: config 0 descriptor?? [ 308.298204][ T5916] usb 2-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 308.321492][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.328936][ T5917] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 308.355758][ T5916] usb 2-1: Product: syz [ 308.368874][ T5916] usb 2-1: Manufacturer: syz [ 309.202717][ T5916] usb 2-1: SerialNumber: syz [ 309.214780][ T30] audit: type=1326 audit(1755901244.955:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8126 comm="syz.5.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41358ebe9 code=0x7fc00000 [ 309.236176][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.028780][ T5916] usb 2-1: USB disconnect, device number 10 [ 310.320130][ T5917] usb 1-1: USB disconnect, device number 18 [ 311.627369][ T5924] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 311.996184][ T5917] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 312.018355][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.037049][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.057975][ T5924] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 312.078275][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.100676][ T5924] usb 5-1: config 0 descriptor?? [ 312.852943][ T5924] usbhid 5-1:0.0: can't add hid device: -71 [ 312.888504][ T5924] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 312.923074][ T5924] usb 5-1: USB disconnect, device number 14 [ 312.936648][ T5896] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 313.112550][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 313.585385][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 313.612410][ T5896] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 313.670310][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.686938][ T5896] usb 2-1: config 0 descriptor?? [ 313.696022][ T8204] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 314.387026][ T5896] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 314.407013][ T5896] cm6533_jd 0003:0D8C:0022.0003: item fetching failed at offset 4/5 [ 314.421486][ T5896] cm6533_jd 0003:0D8C:0022.0003: parse failed [ 314.439373][ T8223] netlink: 2 bytes leftover after parsing attributes in process `syz.3.583'. [ 314.440283][ T5896] cm6533_jd 0003:0D8C:0022.0003: probe with driver cm6533_jd failed with error -22 [ 314.457703][ T8223] netlink: 2 bytes leftover after parsing attributes in process `syz.3.583'. [ 314.493734][ T8224] netlink: 2 bytes leftover after parsing attributes in process `syz.3.583'. [ 314.513626][ T8224] netlink: 2 bytes leftover after parsing attributes in process `syz.3.583'. [ 314.551407][ T8223] tipc: Enabling of bearer rejected, failed to enable media [ 314.969643][ T8239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.997754][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 315.062297][ T1212] usb 2-1: USB disconnect, device number 11 [ 317.095157][ T30] audit: type=1326 audit(1755901252.315:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8253 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc58ebe9 code=0x7ffc0000 [ 317.548299][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.579969][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.917231][ T30] audit: type=1326 audit(1755901252.315:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8253 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc58ebe9 code=0x7ffc0000 [ 317.938962][ T30] audit: type=1326 audit(1755901252.315:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8253 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3bcc58ebe9 code=0x7ffc0000 [ 317.962712][ T30] audit: type=1326 audit(1755901252.325:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8253 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc58ebe9 code=0x7ffc0000 [ 317.984146][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.991162][ T30] audit: type=1326 audit(1755901252.325:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8253 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3bcc58ebe9 code=0x7ffc0000 [ 318.012790][ T30] audit: type=1326 audit(1755901252.325:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8253 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc58ebe9 code=0x7ffc0000 [ 318.034194][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.042075][ T30] audit: type=1326 audit(1755901252.325:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8253 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f3bcc58ebe9 code=0x7ffc0000 [ 318.072232][ T30] audit: type=1326 audit(1755901252.325:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8253 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc58ebe9 code=0x7ffc0000 [ 318.240894][ T30] audit: type=1326 audit(1755901252.325:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8253 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3bcc58ebe9 code=0x7ffc0000 [ 318.896603][ T30] audit: type=1326 audit(1755901252.385:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8253 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc58ebe9 code=0x7ffc0000 [ 319.276846][ T8267] ubi31: attaching mtd0 [ 319.397646][ T8267] ubi31: scanning is finished [ 319.408430][ T8267] ubi31: empty MTD device detected [ 319.993764][ T8267] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 320.032630][ T8267] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 320.065775][ T8267] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 320.088510][ T8267] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 320.136942][ T8267] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 320.144076][ T8267] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 320.295494][ T8283] misc userio: No port type given on /dev/userio [ 320.505877][ T8267] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2731431197 [ 320.564947][ T8267] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 320.685768][ T8278] ubi31: background thread "ubi_bgt31d" started, PID 8278 [ 320.836737][ T8287] binder: 8285:8287 unknown command 0 [ 320.842224][ T8287] binder: 8285:8287 ioctl c0306201 200000000080 returned -22 [ 321.488808][ T8287] binder: BINDER_SET_CONTEXT_MGR already set [ 321.496305][ T8287] binder: 8285:8287 ioctl 4018620d 200000000040 returned -16 [ 321.675205][ T6005] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 321.954245][ T6005] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 321.997277][ T6005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.039290][ T6005] usb 5-1: config 0 has no interface number 0 [ 322.066553][ T6005] usb 5-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.112473][ T6005] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 322.140857][ T6005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.153987][ T5917] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 322.187305][ T6005] usb 5-1: config 0 has no interface number 0 [ 322.209577][ T6005] usb 5-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.250429][ T6005] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 322.276227][ T6005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.310394][ T6005] usb 5-1: config 0 has no interface number 0 [ 322.330063][ T6005] usb 5-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.359513][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 322.382974][ T5917] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 322.398051][ T6005] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf [ 322.416892][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.436837][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.459063][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.468990][ T5896] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 322.480587][ T6005] usb 5-1: config 0 descriptor?? [ 322.500740][ T5917] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.525014][ T6005] usb 5-1: bad CDC descriptors [ 322.533336][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.548627][ T6005] cdc_acm 5-1:0.219: Zero length descriptor references [ 322.566241][ T5917] usb 1-1: Product: syz [ 322.573798][ T6005] cdc_acm 5-1:0.219: probe with driver cdc_acm failed with error -22 [ 322.587172][ T5917] usb 1-1: Manufacturer: syz [ 322.596691][ T5917] usb 1-1: SerialNumber: syz [ 322.639384][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 322.659818][ T5896] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.689139][ T5896] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.713634][ T5896] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.750243][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.756296][ T5896] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 322.785870][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 322.796569][ T5896] usb 6-1: Product: syz [ 322.797329][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.804687][ T5896] usb 6-1: Manufacturer: syz [ 322.817852][ T5896] usb 6-1: SerialNumber: syz [ 322.836478][ T5896] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input8 [ 322.845591][ T6005] usb 5-1: USB disconnect, device number 15 [ 323.016356][ T5917] usb 1-1: 0:2 : does not exist [ 323.060515][ T5896] usb 6-1: USB disconnect, device number 5 [ 323.122164][ T5896] appletouch 6-1:1.0: input: appletouch disconnected [ 324.007607][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.022115][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.257226][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 325.257254][ T30] audit: type=1326 audit(1755901260.995:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5878ebe9 code=0x7fc00000 [ 325.652847][ T30] audit: type=1326 audit(1755901260.995:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe5878ebe9 code=0x7fc00000 [ 325.931848][ T30] audit: type=1326 audit(1755901260.995:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5878ebe9 code=0x7fc00000 [ 326.169164][ T30] audit: type=1326 audit(1755901260.995:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5878ebe9 code=0x7fc00000 [ 326.395167][ T30] audit: type=1326 audit(1755901260.995:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5878ebe9 code=0x7fc00000 [ 326.650331][ T30] audit: type=1326 audit(1755901260.995:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5878ebe9 code=0x7fc00000 [ 326.900213][ T30] audit: type=1326 audit(1755901260.995:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5878ebe9 code=0x7fc00000 [ 327.006521][ T30] audit: type=1326 audit(1755901260.995:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5878ebe9 code=0x7fc00000 [ 327.028429][ T30] audit: type=1326 audit(1755901260.995:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5878ebe9 code=0x7fc00000 [ 327.050014][ T30] audit: type=1326 audit(1755901260.995:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5878ebe9 code=0x7fc00000 [ 327.104812][ T5917] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 327.224681][ T5917] usb 1-1: USB disconnect, device number 20 [ 328.870533][ T5853] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 329.755790][ T6005] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 329.946718][ T6005] usb 2-1: no configurations [ 330.067315][ T6005] usb 2-1: can't read configurations, error -22 [ 330.975521][ T6005] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 331.490814][ T8377] trusted_key: encrypted_key: insufficient parameters specified [ 331.559553][ T8378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.852116][ T5924] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 332.897135][ T5853] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 332.906591][ T5853] Bluetooth: hci1: Injecting HCI hardware error event [ 332.916292][ T5844] Bluetooth: hci1: hardware error 0x00 [ 333.085804][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 333.085993][ T30] audit: type=1326 audit(1755901268.915:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8366 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f1d8ebe9 code=0x7fc00000 [ 333.159184][ T5924] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 333.183398][ T5924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 333.404784][ T5924] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 333.431267][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 333.781143][ T8397] (syz.3.626,8397,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 333.790177][ T8397] (syz.3.626,8397,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 333.805850][ T8397] Bluetooth: Invalid esc byte 0x02 [ 333.852672][ T5924] usb 5-1: Product: syz [ 333.876410][ T5924] usb 5-1: Manufacturer: syz [ 333.893504][ T5924] usb 5-1: SerialNumber: syz [ 333.913090][ T5924] usb 5-1: config 0 descriptor?? [ 333.920252][ T7425] Bluetooth: (null): Invalid header checksum [ 333.948106][ T7425] Bluetooth: (null): Invalid header checksum [ 333.978168][ T5924] usb 5-1: selecting invalid altsetting 0 [ 334.012677][ T8399] netlink: 204 bytes leftover after parsing attributes in process `syz.1.629'. [ 334.055820][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 335.061834][ T5844] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 336.052808][ T1212] usb 5-1: USB disconnect, device number 16 [ 336.078969][ T5924] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 336.376332][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 336.454024][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.635'. [ 336.467150][ T5924] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 336.499426][ T8423] 9pnet_fd: Insufficient options for proto=fd [ 336.515752][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.653798][ T5924] pvrusb2: Hardware description: Terratec Grabster AV400 [ 337.285094][ T5924] pvrusb2: ********** [ 337.314928][ T5924] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 337.432243][ T5924] pvrusb2: Important functionality might not be entirely working. [ 337.475764][ T5924] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 337.543909][ T5924] pvrusb2: ********** [ 337.561236][ T2345] pvrusb2: Invalid write control endpoint [ 337.576396][ T5924] usb 2-1: USB disconnect, device number 14 [ 337.776832][ T2345] pvrusb2: Invalid write control endpoint [ 337.782814][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 337.799791][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 340.089691][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 340.111804][ T2345] pvrusb2: Device being rendered inoperable [ 341.410225][ T30] audit: type=1326 audit(1755901277.265:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ad8ebe9 code=0x7fc00000 [ 341.614498][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 341.624549][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 341.642390][ T2345] pvrusb2: Attached sub-driver cx25840 [ 341.648237][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 341.658544][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 342.161573][ T8453] binder: 8451:8453 ioctl 4018620d 0 returned -22 [ 342.723948][ T8466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.731114][ T5924] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 343.200184][ T927] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 343.243572][ T5924] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 343.262773][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 343.286978][ T5924] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 343.301473][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 343.311237][ T5924] usb 2-1: Product: syz [ 343.416443][ T927] usb 6-1: device descriptor read/64, error -71 [ 343.441398][ T5924] usb 2-1: Manufacturer: syz [ 343.448642][ T5924] usb 2-1: SerialNumber: syz [ 343.478975][ T5924] usb 2-1: config 0 descriptor?? [ 344.185752][ T927] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 344.199513][ T5924] usb 2-1: selecting invalid altsetting 0 [ 344.247819][ T8478] 9pnet_fd: Insufficient options for proto=fd [ 344.315908][ T927] usb 6-1: device descriptor read/64, error -71 [ 344.920378][ T927] usb usb6-port1: attempt power cycle [ 346.228498][ T927] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 347.153646][ T927] usb 6-1: device descriptor read/8, error -71 [ 347.229467][ T1212] usb 2-1: USB disconnect, device number 15 [ 347.898832][ T8499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.516276][ T8492] trusted_key: syz.1.655 sent an empty control message without MSG_MORE. [ 349.328766][ T8503] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 349.338227][ T8503] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 350.392923][ T30] audit: type=1326 audit(1755901286.245:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8490 comm="syz.5.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41358ebe9 code=0x7fc00000 [ 350.556583][ T8522] team0: Port device team_slave_0 removed [ 350.572866][ T8522] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 350.598658][ T8523] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 351.696317][ T5984] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 351.890387][ T5984] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 351.983540][ T5984] usb 5-1: config 0 interface 0 has no altsetting 0 [ 352.027203][ T5984] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 352.045899][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 352.123847][ T5984] usb 5-1: Product: syz [ 352.133141][ T5984] usb 5-1: Manufacturer: syz [ 352.142956][ T5984] usb 5-1: SerialNumber: syz [ 352.180502][ T5984] usb 5-1: config 0 descriptor?? [ 352.219413][ T8529] binder: 8528:8529 ioctl 4018620d 0 returned -22 [ 352.242550][ T5984] usb 5-1: selecting invalid altsetting 0 [ 352.407498][ T927] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 353.283475][ T927] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 353.480686][ T927] usb 4-1: config 0 has no interface number 0 [ 353.491069][ T927] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 353.503786][ T927] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.110924][ T927] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 354.147427][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.155774][ T927] usb 4-1: Product: syz [ 354.161100][ T927] usb 4-1: Manufacturer: syz [ 354.165876][ T927] usb 4-1: SerialNumber: syz [ 354.174375][ T927] usb 4-1: config 0 descriptor?? [ 354.185472][ T8544] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 354.194796][ T927] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 354.210750][ T927] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 354.301532][ T9] usb 5-1: USB disconnect, device number 17 [ 354.411458][ T8544] netlink: 188 bytes leftover after parsing attributes in process `syz.3.669'. [ 354.447158][ T8564] netlink: ct family unspecified [ 354.496930][ T8564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.624011][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.678224][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.786239][ T5984] usb 4-1: USB disconnect, device number 20 [ 354.851801][ T5984] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 355.076452][ T5984] cyberjack 4-1:0.69: device disconnected [ 355.615540][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.675'. [ 356.064797][ T8580] program syz.0.678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.978407][ T8595] xt_TPROXY: Can be used only with -p tcp or -p udp [ 357.529584][ T8586] binder: BINDER_SET_CONTEXT_MGR already set [ 357.538432][ T8586] binder: 8585:8586 ioctl 4018620d 200000000040 returned -16 [ 357.683464][ T8579] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 357.686118][ T5896] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 357.805818][ T5984] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 357.876034][ T5896] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 357.900572][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 357.923230][ T5896] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 357.940227][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 357.955890][ T5984] usb 6-1: Using ep0 maxpacket: 8 [ 357.963804][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.970766][ T5896] usb 4-1: Product: syz [ 357.992234][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.003817][ T5896] usb 4-1: Manufacturer: syz [ 358.012616][ T5896] usb 4-1: SerialNumber: syz [ 358.022285][ T5984] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 358.024016][ T5896] usb 4-1: config 0 descriptor?? [ 358.061010][ T5896] usb 4-1: selecting invalid altsetting 0 [ 358.067102][ T5984] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 358.087106][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.115336][ T5984] usb 6-1: config 0 descriptor?? [ 358.375797][ T5896] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 359.007338][ T9] usb 4-1: USB disconnect, device number 21 [ 359.032427][ T30] audit: type=1326 audit(1755901294.875:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8572 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc58ebe9 code=0x7fc00000 [ 359.345911][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 359.597964][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 359.640828][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 359.655485][ T5984] usbhid 6-1:0.0: can't add hid device: -71 [ 359.669736][ T5984] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 359.679358][ T5896] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 359.803370][ T5984] usb 6-1: USB disconnect, device number 10 [ 360.461491][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.565244][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'. [ 361.288202][ T5896] usb 5-1: config 0 descriptor?? [ 361.993659][ T5896] usb 5-1: can't set config #0, error -71 [ 362.007261][ T5896] usb 5-1: USB disconnect, device number 18 [ 362.039009][ T8639] netlink: 1355 bytes leftover after parsing attributes in process `syz.5.694'. [ 362.500882][ T8655] xt_hashlimit: max too large, truncated to 1048576 [ 363.988569][ T1212] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 364.367919][ T1212] usb 2-1: Using ep0 maxpacket: 32 [ 364.389927][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.410339][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.428234][ T1212] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 364.445339][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.465857][ T6005] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 364.486869][ T1212] usb 2-1: config 0 descriptor?? [ 364.622324][ T6005] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 364.642900][ T6005] usb 1-1: config 0 interface 0 has no altsetting 0 [ 364.679171][ T6005] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 364.883088][ T6005] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 364.892647][ T6005] usb 1-1: Product: syz [ 364.897307][ T6005] usb 1-1: Manufacturer: syz [ 364.916017][ T6005] usb 1-1: SerialNumber: syz [ 364.924277][ T6005] usb 1-1: config 0 descriptor?? [ 364.942252][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.943752][ T6005] usb 1-1: selecting invalid altsetting 0 [ 364.996747][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.318498][ T1212] usbhid 2-1:0.0: can't add hid device: -71 [ 365.324637][ T1212] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 365.338883][ T1212] usb 2-1: USB disconnect, device number 16 [ 365.654119][ T6005] usb 1-1: USB disconnect, device number 21 [ 365.764014][ T8707] Invalid ELF header len 4 [ 366.155771][ T5896] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 366.336106][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 366.343505][ T5896] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 366.356019][ T5896] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 366.385376][ T5896] usb 4-1: config 1 has no interface number 1 [ 366.410574][ T5896] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 366.438374][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.450014][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.465688][ T5896] usb 4-1: Product: syz [ 366.469885][ T5896] usb 4-1: Manufacturer: syz [ 366.484988][ T5896] usb 4-1: SerialNumber: syz [ 366.506466][ T5984] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 366.656838][ T6005] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 366.676445][ T5984] usb 2-1: device descriptor read/64, error -71 [ 366.716035][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'. [ 366.856393][ T6005] usb 6-1: Using ep0 maxpacket: 32 [ 366.895034][ T6005] usb 6-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 366.913995][ T5896] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 366.920617][ T6005] usb 6-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 366.947941][ T5984] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 367.000563][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.036009][ T6005] usb 6-1: Product: syz [ 367.044815][ T6005] usb 6-1: Manufacturer: syz [ 367.085238][ T6005] usb 6-1: SerialNumber: syz [ 367.155851][ T5984] usb 2-1: device descriptor read/64, error -71 [ 367.173236][ T5896] usb 4-1: USB disconnect, device number 22 [ 367.178768][ T6005] pwc: Askey VC010 type 1 USB webcam detected. [ 367.288614][ T5984] usb usb2-port1: attempt power cycle [ 367.725808][ T5984] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 367.935952][ T5896] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 368.095799][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 368.099278][ T5984] usb 2-1: device descriptor read/8, error -71 [ 368.104510][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 368.138154][ T5896] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.159451][ T5896] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 368.180011][ T5896] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 368.208439][ T5896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.218805][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.230747][ T5896] usb 4-1: Product: syz [ 368.364021][ T5896] usb 4-1: Manufacturer: syz [ 368.369222][ T5896] usb 4-1: SerialNumber: syz [ 368.376680][ T5984] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 368.427184][ T5984] usb 2-1: device descriptor read/8, error -71 [ 368.556178][ T5984] usb usb2-port1: unable to enumerate USB device [ 368.812350][ T8741] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 368.839742][ T5896] cdc_ncm 4-1:1.0: bind() failure [ 369.378841][ T5896] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 369.385761][ T5896] cdc_ncm 4-1:1.1: bind() failure [ 369.395192][ T5896] usb 4-1: USB disconnect, device number 23 [ 369.715397][ T8760] netlink: 'syz.1.723': attribute type 1 has an invalid length. [ 370.335461][ T6005] pwc: send_video_command error -71 [ 370.355909][ T6005] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 370.376249][ T6005] Philips webcam 6-1:76.0: probe with driver Philips webcam failed with error -71 [ 370.380543][ T8760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.723'. [ 370.408442][ T8764] can0: slcan on ttyS3. [ 370.424510][ T6005] usb 6-1: USB disconnect, device number 11 [ 370.441255][ T8761] bond2: (slave gretap1): making interface the new active one [ 370.579029][ T8761] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 371.419654][ T8780] syz_tun: entered allmulticast mode [ 371.516361][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'. [ 371.891592][ T8768] can0 (unregistered): slcan off ttyS3. [ 372.420765][ T8793] sp0: Synchronizing with TNC [ 376.309907][ T8816] Illegal XDP return value 4294967294 on prog (id 224) dev N/A, expect packet loss! [ 376.720623][ T5984] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 376.857142][ T8836] lo speed is unknown, defaulting to 1000 [ 376.863775][ T8836] lo speed is unknown, defaulting to 1000 [ 376.880399][ T8836] lo speed is unknown, defaulting to 1000 [ 376.925149][ T8836] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 377.050419][ T8836] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 377.267461][ T8836] lo speed is unknown, defaulting to 1000 [ 377.293212][ T8836] lo speed is unknown, defaulting to 1000 [ 377.317474][ T8836] lo speed is unknown, defaulting to 1000 [ 377.342225][ T8836] lo speed is unknown, defaulting to 1000 [ 377.361142][ T5916] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 377.361357][ T8836] lo speed is unknown, defaulting to 1000 [ 377.371823][ T8838] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 377.371823][ T8838] The task syz.5.744 (8838) triggered the difference, watch for misbehavior. [ 377.376748][ T8836] lo speed is unknown, defaulting to 1000 [ 377.555773][ T5984] usb 5-1: Using ep0 maxpacket: 16 [ 377.563075][ T5984] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.606694][ T5984] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.631320][ T5984] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.640708][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.765824][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.955575][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.101544][ T5916] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 378.117318][ T5896] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 378.220538][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.254683][ T5837] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 378.263914][ T5984] usb 5-1: Product: syz [ 378.264921][ T5916] usb 4-1: config 0 descriptor?? [ 378.276554][ T5984] usb 5-1: Manufacturer: syz [ 378.281186][ T5984] usb 5-1: SerialNumber: syz [ 378.356021][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 378.370131][ T5896] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 378.380466][ T5896] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.394027][ T5896] usb 6-1: config 0 has no interface number 0 [ 378.401361][ T5896] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 378.414449][ T5896] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 378.415953][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 378.427494][ T5896] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 378.450089][ T5896] usb 6-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 378.452140][ T5837] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 378.462013][ T5896] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 378.498095][ T8827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.511554][ T8819] evm: overlay not supported [ 378.512317][ T8827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.525431][ T5896] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 378.543688][ T5837] usb 2-1: config 0 has no interface number 0 [ 378.553021][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.590423][ T5896] usb 6-1: config 0 descriptor?? [ 378.597187][ T5984] usb 5-1: 0:2 : does not exist [ 378.601845][ T8842] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 378.605379][ T5837] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 378.620962][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.630440][ T5837] usb 2-1: Product: syz [ 378.634970][ T5837] usb 2-1: Manufacturer: syz [ 378.641412][ T5837] usb 2-1: SerialNumber: syz [ 378.646379][ T5984] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 378.660291][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.669753][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.693637][ T5984] usb 5-1: USB disconnect, device number 19 [ 378.694971][ T5896] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.708238][ T5837] usb 2-1: config 0 descriptor?? [ 378.759743][ T5837] hub 2-1:0.89: bad descriptor, ignoring hub [ 378.769439][ T5837] hub 2-1:0.89: probe with driver hub failed with error -5 [ 378.868567][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 378.869769][ T5837] option 2-1:0.89: GSM modem (1-port) converter detected [ 378.903471][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 378.996974][ T5916] usb 4-1: USB disconnect, device number 24 [ 379.117139][ T8834] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 8834 comm: syz.1.743) [ 379.127041][ T5837] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 379.158271][ T30] audit: type=1800 audit(1755901314.995:274): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.743" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=18413 res=0 errno=0 [ 379.426945][ T5896] snd-usb-audio 6-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 379.457605][ T5837] usb 2-1: USB disconnect, device number 21 [ 379.504084][ T5837] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 379.526938][ T5837] option 2-1:0.89: device disconnected [ 379.891424][ T5837] usb 6-1: USB disconnect, device number 12 [ 380.045787][ T5984] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 380.171206][ T1212] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 380.198566][ T5984] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 380.225070][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 380.240942][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 380.253221][ T5984] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.300015][ T5984] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.328588][ T1212] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 380.343197][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.365424][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.390415][ T5984] usb 5-1: config 0 descriptor?? [ 380.405148][ T1212] usb 2-1: config 0 descriptor?? [ 380.411205][ T8859] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 380.429003][ T1212] cp210x 2-1:0.0: cp210x converter detected [ 381.147747][ T1212] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 381.768212][ T1212] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 382.215841][ T1212] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 382.256875][ T1212] usb 2-1: cp210x converter now attached to ttyUSB0 [ 382.282710][ T1212] usb 2-1: USB disconnect, device number 22 [ 382.330347][ T1212] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 382.346712][ T1212] cp210x 2-1:0.0: device disconnected [ 382.603122][ T8893] netlink: 'syz.0.756': attribute type 6 has an invalid length. [ 382.654705][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.756'. [ 382.721817][ T8894] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 382.809897][ T5984] usbhid 5-1:0.0: can't add hid device: -71 [ 382.830526][ T5984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 382.866745][ T5984] usb 5-1: USB disconnect, device number 20 [ 383.052808][ T8896] netlink: 15 bytes leftover after parsing attributes in process `syz.3.758'. [ 383.297077][ T30] audit: type=1326 audit(1755901319.145:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8888 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 383.742649][ T30] audit: type=1326 audit(1755901319.145:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8888 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 383.807331][ T30] audit: type=1326 audit(1755901319.175:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8888 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 383.862765][ T30] audit: type=1326 audit(1755901319.715:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8888 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 383.926175][ T30] audit: type=1326 audit(1755901319.715:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8888 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 384.587609][ T8905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 384.694096][ T8905] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 385.001391][ T8905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 385.069578][ T8905] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 385.170933][ T8905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.187353][ T8905] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 385.295128][ T8905] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.318473][ T8926] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000006 [ 385.356658][ T8905] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 386.258064][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.769'. [ 387.136649][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 387.215737][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 387.295742][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 387.388809][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 387.456045][ T5844] Bluetooth: hci0: command tx timeout [ 388.697029][ T8962] afs: Bad value for 'flock' [ 388.820259][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'. [ 388.916701][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 388.938758][ T8967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.001707][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.776'. [ 389.224525][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 389.359281][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 390.418005][ T8979] input: syz0 as /devices/virtual/input/input12 [ 390.673525][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.716265][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.945835][ T5916] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 391.129786][ T8997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.328584][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.344284][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.358458][ T5916] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 391.386979][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 391.400723][ T5916] usb 1-1: SerialNumber: syz [ 392.033843][ T5916] usb 1-1: 0:2 : does not exist [ 392.055814][ T5916] usb 1-1: unit 5 not found! [ 392.108097][ T5916] usb 1-1: USB disconnect, device number 22 [ 392.178155][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.247280][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.395819][ T5896] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 392.979138][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.009752][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.062234][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.076199][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.099656][ T5896] usb 4-1: Product: syz [ 394.187244][ T5896] usb 4-1: Manufacturer: syz [ 394.191884][ T5896] usb 4-1: SerialNumber: syz [ 394.298735][ T9020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.593791][ T43] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 394.692363][ T9025] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 394.885877][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 394.962587][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.143310][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.269396][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 395.326443][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.353883][ T43] usb 1-1: config 0 descriptor?? [ 395.739400][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 395.859802][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 395.999817][ T5896] usb 4-1: 0:2 : does not exist [ 396.011056][ T5896] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 396.026690][ T43] usb 1-1: USB disconnect, device number 23 [ 396.047904][ T5896] usb 4-1: USB disconnect, device number 25 [ 396.601537][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 397.106095][ T9] usb 5-1: device descriptor read/64, error -71 [ 397.365779][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 398.103566][ T9] usb 5-1: device descriptor read/64, error -71 [ 398.227132][ T9] usb usb5-port1: attempt power cycle [ 398.527012][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.804'. [ 398.569340][ T9069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.575798][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 399.058429][ T9] usb 5-1: device descriptor read/8, error -71 [ 399.645711][ T5916] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 399.819598][ T5916] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 400.060195][ T6005] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 400.110017][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 400.349412][ T6005] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 400.425459][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.549070][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 400.556238][ T6005] usb 6-1: config 0 descriptor?? [ 400.559282][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 400.576296][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 400.585512][ T9] usb 5-1: device descriptor read/8, error -71 [ 400.593969][ T5916] usb 4-1: Product: syz [ 400.598363][ T5916] usb 4-1: Manufacturer: syz [ 400.602982][ T5916] usb 4-1: SerialNumber: syz [ 400.618694][ T5916] usb 4-1: config 0 descriptor?? [ 400.631382][ T5916] usb 4-1: selecting invalid altsetting 0 [ 400.672915][ T9092] ./file0: Can't lookup blockdev [ 400.695969][ T9] usb usb5-port1: unable to enumerate USB device [ 403.373182][ T6005] usb 6-1: Cannot set autoneg [ 403.378252][ T6005] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 403.445043][ T6005] usb 6-1: USB disconnect, device number 13 [ 403.824937][ T9112] lo speed is unknown, defaulting to 1000 [ 404.128460][ T9115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.818'. [ 404.144228][ T9118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.795979][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 404.883090][ T5916] usb 4-1: USB disconnect, device number 26 [ 405.006285][ T9] usb 6-1: device descriptor read/64, error -71 [ 405.385849][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 405.735844][ T9] usb 6-1: device descriptor read/64, error -71 [ 405.856632][ T9] usb usb6-port1: attempt power cycle [ 406.229474][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 406.264868][ T9] usb 6-1: device descriptor read/8, error -71 [ 406.541503][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 406.637648][ T9] usb 6-1: device descriptor read/8, error -71 [ 406.788200][ T9] usb usb6-port1: unable to enumerate USB device [ 407.399456][ T9166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.105708][ T5916] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 409.152909][ T9191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.328633][ T5916] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 409.878298][ T5916] usb 5-1: config 0 interface 0 has no altsetting 0 [ 409.897696][ T5916] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 409.915855][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 409.935889][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 409.944116][ T5916] usb 5-1: Product: syz [ 409.975814][ T5916] usb 5-1: Manufacturer: syz [ 409.980604][ T5916] usb 5-1: SerialNumber: syz [ 410.000100][ T5916] usb 5-1: config 0 descriptor?? [ 410.031068][ T5916] usb 5-1: selecting invalid altsetting 0 [ 410.056574][ T9195] netlink: 172 bytes leftover after parsing attributes in process `syz.3.844'. [ 410.070504][ T9195] netlink: 64 bytes leftover after parsing attributes in process `syz.3.844'. [ 410.137651][ T9] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 410.146557][ T9] usb 2-1: config 0 has no interface number 0 [ 410.152832][ T9] usb 2-1: config 0 interface 215 has no altsetting 0 [ 410.160064][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0467, bcdDevice=6d.1a [ 410.184540][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.197635][ T9] usb 2-1: config 0 descriptor?? [ 410.710585][ T5896] usb 2-1: USB disconnect, device number 23 [ 413.567562][ T9218] netlink: 300 bytes leftover after parsing attributes in process `syz.1.847'. [ 414.539653][ T9223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.691351][ T43] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 415.822051][ T5916] usb 5-1: USB disconnect, device number 25 [ 415.859443][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 415.902990][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.976785][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.015999][ T6005] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 416.032254][ T43] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 416.105563][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.265668][ T6005] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 416.314141][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.364842][ T6005] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 416.476059][ T6005] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 416.485906][ T6005] usb 2-1: Manufacturer: syz [ 416.511809][ T43] usb 1-1: config 0 descriptor?? [ 416.518136][ T6005] usb 2-1: config 0 descriptor?? [ 416.655736][ T6005] rc_core: IR keymap rc-hauppauge not found [ 416.661932][ T6005] Registered IR keymap rc-empty [ 416.671695][ T6005] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 416.685127][ T6005] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 416.752080][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 416.763656][ T5916] usb 2-1: USB disconnect, device number 24 [ 416.786014][ T5896] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 416.845983][ T1212] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 416.945800][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 416.953003][ T5896] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 416.962808][ T5896] usb 6-1: config 0 has no interface number 0 [ 416.969299][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 416.981827][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 416.991412][ T5896] usb 6-1: config 0 interface 184 has no altsetting 0 [ 417.001038][ T5896] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 417.010554][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.018747][ T1212] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 417.018895][ T5896] usb 6-1: Product: syz [ 417.034291][ T1212] usb 4-1: config 0 has no interface number 0 [ 417.041039][ T1212] usb 4-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 417.051667][ T5896] usb 6-1: Manufacturer: syz [ 417.058097][ T1212] usb 4-1: config 0 interface 11 has no altsetting 0 [ 417.065200][ T1212] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 417.074267][ T5896] usb 6-1: SerialNumber: syz [ 417.084505][ T5896] usb 6-1: config 0 descriptor?? [ 417.092828][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.094086][ T5896] smsc75xx v1.0.0 [ 417.111725][ T1212] usb 4-1: config 0 descriptor?? [ 417.115739][ T5896] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 417.122488][ T9252] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 417.139011][ T1212] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 417.145576][ T5896] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 417.154171][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 417.164654][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 417.177672][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 417.189341][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 417.198488][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 417.206451][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 417.212198][ T9231] delete_channel: no stack [ 417.216624][ T1212] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 417.229606][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 417.237788][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 417.249373][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 417.257521][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 417.265355][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 417.274417][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 417.282984][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 417.314259][ T5896] usb 6-1: USB disconnect, device number 18 [ 417.314298][ T1212] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 417.337492][ T43] usb 1-1: USB disconnect, device number 24 [ 417.361685][ T1212] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 417.391775][ T1212] usb 4-1: USB disconnect, device number 27 [ 417.405467][ T1212] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 417.432666][ T1212] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 417.454809][ T1212] keyspan 4-1:0.11: device disconnected [ 418.199047][ T9272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.834604][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'. [ 419.857119][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 419.895843][ T5896] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 420.938231][ T5896] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 420.955864][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.240575][ T5896] usb 2-1: config 0 descriptor?? [ 421.337330][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 421.456610][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.556270][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 421.556368][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 421.556724][ T9] usb 4-1: Product: syz [ 421.556741][ T9] usb 4-1: Manufacturer: syz [ 421.556756][ T9] usb 4-1: SerialNumber: syz [ 421.735097][ T9] usb 4-1: config 0 descriptor?? [ 421.867286][ T5896] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 422.106795][ T9] usb 4-1: selecting invalid altsetting 0 [ 423.791452][ T5896] [drm:udl_init] *ERROR* Selecting channel failed [ 423.801336][ T9309] netlink: 16 bytes leftover after parsing attributes in process `syz.5.874'. [ 423.852908][ T5896] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 423.905589][ T5896] [drm] Initialized udl on minor 2 [ 423.931325][ T5896] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 424.924723][ T5896] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 424.932706][ T9309] bond_slave_1: mtu less than device minimum [ 424.950085][ T9133] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 424.956974][ T9319] netlink: 80 bytes leftover after parsing attributes in process `syz.4.876'. [ 424.968437][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 424.993760][ T5896] usb 2-1: USB disconnect, device number 25 [ 425.001422][ T9133] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 425.028989][ T9319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.876'. [ 425.038797][ T9316] binder_alloc: 9310: binder_alloc_buf, no vma [ 425.045461][ T9316] binder: 9310:9316 ioctl c0306201 200000000240 returned -11 [ 425.181803][ T9320] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.876'. [ 425.315823][ T9133] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 425.619478][ T9133] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 425.920311][ T9133] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 425.944906][ T9133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 425.973165][ T9133] usb 6-1: Product: syz [ 425.991800][ T9133] usb 6-1: Manufacturer: syz [ 426.015131][ T9133] usb 6-1: SerialNumber: syz [ 426.029666][ T9133] usb 6-1: config 0 descriptor?? [ 426.039414][ T9330] lo speed is unknown, defaulting to 1000 [ 426.655262][ T9] usb 6-1: USB disconnect, device number 19 [ 427.455592][ T9] usb 4-1: USB disconnect, device number 28 [ 428.854929][ T9365] netlink: 'syz.0.890': attribute type 4 has an invalid length. [ 428.949544][ T9361] lo speed is unknown, defaulting to 1000 [ 429.642852][ T30] audit: type=1326 audit(1755901365.495:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ad8ebe9 code=0x7ffc0000 [ 429.645963][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 429.693870][ T30] audit: type=1326 audit(1755901365.525:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f3d2ad8ebe9 code=0x7ffc0000 [ 430.009480][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 430.137572][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.282448][ T43] lo speed is unknown, defaulting to 1000 [ 430.284604][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.496308][ T30] audit: type=1326 audit(1755901365.525:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ad8ebe9 code=0x7ffc0000 [ 430.528296][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.579124][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.592326][ T9386] netlink: 'syz.4.896': attribute type 11 has an invalid length. [ 430.633837][ T9] usb 2-1: Product: syz [ 430.659939][ T9] usb 2-1: Manufacturer: syz [ 430.664582][ T9] usb 2-1: SerialNumber: syz [ 430.935756][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 430.955109][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 431.109692][ T9133] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 431.296020][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 431.322190][ T9] usb 2-1: cannot find UAC_HEADER [ 431.379167][ T43] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 431.405469][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.406145][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 431.552561][ T9133] usb 6-1: Using ep0 maxpacket: 16 [ 431.686592][ T9133] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 431.696176][ T9133] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 431.723278][ T9133] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.732539][ T43] usb 1-1: Product: syz [ 431.736876][ T9133] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.736904][ T9133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.736925][ T9133] usb 6-1: Product: syz [ 431.736941][ T9133] usb 6-1: Manufacturer: syz [ 431.736956][ T9133] usb 6-1: SerialNumber: syz [ 431.781075][ T1212] usb 2-1: USB disconnect, device number 26 [ 431.798419][ T43] usb 1-1: Manufacturer: syz [ 431.808373][ T43] usb 1-1: SerialNumber: syz [ 431.818525][ T43] usb 1-1: config 0 descriptor?? [ 431.830811][ T43] rtl8150 1-1:0.0: couldn't find required endpoints [ 431.840242][ T43] rtl8150 1-1:0.0: probe with driver rtl8150 failed with error -5 [ 432.060420][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.060837][ T9133] usb 6-1: 0:2 : does not exist [ 432.107052][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.117823][ T10] usb 1-1: USB disconnect, device number 25 [ 432.177507][ T9133] usb 6-1: USB disconnect, device number 20 [ 434.345918][ T9133] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 434.455754][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 434.495932][ T43] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 434.508353][ T9133] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.518416][ T9133] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.531588][ T9133] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.541149][ T9133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.618231][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 434.625429][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 434.636572][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.646623][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.656746][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 434.667983][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 434.675825][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 434.678209][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 434.690924][ T43] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 434.693630][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.709040][ T43] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 434.714608][ T9] usb 2-1: config 0 descriptor?? [ 434.723018][ T43] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.743168][ T10] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 434.751393][ T43] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 434.763863][ T43] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 434.765218][ T9133] usb 4-1: usb_control_msg returned -32 [ 434.780592][ T43] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 434.793834][ T9430] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 434.799121][ T9133] usbtmc 4-1:16.0: can't read capabilities [ 434.801756][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.820118][ T43] usb 6-1: Product: syz [ 434.829574][ T43] usb 6-1: Manufacturer: syz [ 434.834428][ T43] usb 6-1: SerialNumber: syz [ 434.846734][ T43] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 434.856018][ T43] imon 6-1:155.0: unable to initialize intf0, err -90 [ 434.862956][ T43] imon:imon_probe: failed to initialize context! [ 434.869590][ T43] imon 6-1:155.0: unable to register, err -19 [ 434.935781][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 435.068737][ T10] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 435.080490][ T9] usb 6-1: USB disconnect, device number 21 [ 435.230897][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 435.238592][ T10] usb usb1-port1: attempt power cycle [ 435.239506][ T5984] usb 2-1: USB disconnect, device number 27 [ 435.250042][ T5844] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 435.480073][ T1212] usb 4-1: USB disconnect, device number 29 [ 435.516437][ T9448] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 435.531850][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 435.585743][ T10] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 435.627222][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 435.665694][ T43] usb 5-1: device descriptor read/64, error -71 [ 435.766372][ T10] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 435.788114][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 435.804775][ T10] usb usb1-port1: unable to enumerate USB device [ 435.915712][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 436.065755][ T43] usb 5-1: device descriptor read/64, error -71 [ 436.182875][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 436.346710][ T10] usb 2-1: device descriptor read/64, error -71 [ 436.629029][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 436.938930][ T10] usb 2-1: device descriptor read/64, error -71 [ 436.968330][ T9472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.977805][ T43] usb usb5-port1: attempt power cycle [ 437.125321][ T10] usb usb2-port1: attempt power cycle [ 437.226495][ T9477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.922'. [ 437.475809][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 437.546152][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 437.739745][ T10] usb 2-1: device descriptor read/8, error -71 [ 437.996158][ T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 438.015897][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 438.046352][ T43] usb 5-1: device descriptor read/8, error -71 [ 438.050096][ T10] usb 2-1: device descriptor read/8, error -71 [ 438.156671][ T9493] binder: 9492:9493 ioctl c0306201 0 returned -14 [ 438.163503][ T9493] binder: 9492:9493 ioctl c018620c 200000000280 returned -1 [ 438.176576][ T10] usb usb2-port1: unable to enumerate USB device [ 438.306004][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 438.556310][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 438.625814][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 438.704858][ T9] usb 6-1: config 179 has no interface number 0 [ 438.769951][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 438.889057][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 439.069684][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 439.328091][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 439.756678][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 439.814955][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 439.863463][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.894567][ T9488] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 440.100908][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.108311][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.216662][ T43] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 440.417713][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 440.472563][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.524388][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 440.543627][ T5984] usb 6-1: USB disconnect, device number 22 [ 440.543644][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 440.559415][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 440.583378][ T43] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 440.622723][ T9525] tmpfs: Bad value for 'mpol' [ 440.650318][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.681235][ T43] usb 2-1: config 0 descriptor?? [ 440.767855][ T9532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.938'. [ 440.980681][ T9537] tmpfs: Unknown parameter 'u' [ 441.201200][ T9539] netlink: 248 bytes leftover after parsing attributes in process `syz.3.938'. [ 441.422493][ T9517] netlink: 'syz.1.935': attribute type 3 has an invalid length. [ 441.689904][ T9517] netlink: 'syz.1.935': attribute type 3 has an invalid length. [ 441.771570][ T9517] netlink: 'syz.1.935': attribute type 3 has an invalid length. [ 441.905799][ T9517] netlink: 'syz.1.935': attribute type 3 has an invalid length. [ 441.913566][ T9517] netlink: 'syz.1.935': attribute type 3 has an invalid length. [ 441.964548][ T43] hid (null): report_id 55783 is invalid [ 442.000548][ T9517] netlink: 'syz.1.935': attribute type 3 has an invalid length. [ 442.010945][ T43] cougar 0003:060B:500A.0004: usage count exceeds max: fixing up report descriptor [ 442.042452][ T9540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.079714][ T9517] netlink: 'syz.1.935': attribute type 3 has an invalid length. [ 442.406008][ T9540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.454311][ T43] cougar 0003:060B:500A.0004: unexpected long global item [ 442.462259][ T43] cougar 0003:060B:500A.0004: parse failed [ 442.470455][ T43] cougar 0003:060B:500A.0004: probe with driver cougar failed with error -22 [ 442.474755][ T9517] netlink: 'syz.1.935': attribute type 3 has an invalid length. [ 442.515833][ T9517] netlink: 'syz.1.935': attribute type 3 has an invalid length. [ 442.536218][ T9517] netlink: 'syz.1.935': attribute type 3 has an invalid length. [ 442.569871][ T9550] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 442.576142][ T43] usb 2-1: USB disconnect, device number 32 [ 444.001994][ T9580] xt_hashlimit: max too large, truncated to 1048576 [ 445.697719][ T9592] NILFS (nullb0): couldn't find nilfs on the device [ 446.737481][ T30] audit: type=1326 audit(1755901382.585:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 446.764275][ T9597] netlink: 248 bytes leftover after parsing attributes in process `syz.0.957'. [ 447.740011][ T30] audit: type=1326 audit(1755901382.585:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 448.363418][ T30] audit: type=1326 audit(1755901382.585:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 448.364540][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 448.385041][ T30] audit: type=1326 audit(1755901382.585:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 448.416033][ T30] audit: type=1326 audit(1755901382.585:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 448.441734][ T5984] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 448.455195][ T30] audit: type=1326 audit(1755901382.585:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 448.489044][ T9600] lo speed is unknown, defaulting to 1000 [ 448.551630][ T30] audit: type=1326 audit(1755901382.585:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 448.612753][ T30] audit: type=1326 audit(1755901382.585:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 448.694629][ T30] audit: type=1326 audit(1755901382.585:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 448.746614][ T9584] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 448.753045][ T9584] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 448.759300][ T9584] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 448.765710][ T9584] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 448.773339][ T9584] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 448.808152][ T30] audit: type=1326 audit(1755901382.585:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f71f1d8ebe9 code=0x7ffc0000 [ 448.863320][ T9607] sp0: Synchronizing with TNC [ 448.900584][ T9611] netlink: 24 bytes leftover after parsing attributes in process `syz.5.960'. [ 448.911435][ T9606] [U] [ 449.700760][ T9624] syz.4.961: attempt to access beyond end of device [ 449.700760][ T9624] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 449.715701][ T9624] (syz.4.961,9624,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 449.723351][ T9624] (syz.4.961,9624,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 449.730957][ T9624] (syz.4.961,9624,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 449.739964][ T9624] (syz.4.961,9624,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 449.805870][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 450.816051][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 450.823326][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 450.829498][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 450.835935][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 451.224762][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 451.885737][ T1212] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 452.142343][ T1212] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 452.182496][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 452.245713][ T1212] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 452.285685][ T1212] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 452.294795][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.332782][ T1212] usb 5-1: config 0 descriptor?? [ 452.345941][ T9635] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 452.378166][ T1212] gspca_main: spca561-2.14.0 probing abcd:cdee [ 452.984720][ T9655] vlan0: entered promiscuous mode [ 453.077181][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.972'. [ 453.186844][ T1212] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 453.196117][ T1212] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 453.203768][ T1212] usb 5-1: MIDIStreaming interface descriptor not found [ 453.205925][ T9655] vlan0: entered allmulticast mode [ 453.271916][ T1212] usb 5-1: USB disconnect, device number 30 [ 453.304768][ T9655] hsr_slave_1: entered allmulticast mode [ 454.227932][ T9646] mmap: syz.3.968 (9646) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 454.927787][ T9677] validate_nla: 45 callbacks suppressed [ 454.927842][ T9677] netlink: 'syz.4.976': attribute type 10 has an invalid length. [ 455.059861][ T9676] ceph: No mds server is up or the cluster is laggy [ 455.069111][ T9] libceph: connect (1)[c::]:6789 error -101 [ 455.075417][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 455.118171][ T9677] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.302289][ T9681] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 455.326766][ T9681] netem: change failed [ 455.349990][ T9682] netem: change failed [ 455.473587][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 458.055948][ T9713] mmap: syz.3.986 (9713): VmData 37859328 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 458.540301][ T9725] xt_hashlimit: max too large, truncated to 1048576 [ 459.235652][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 459.235673][ T30] audit: type=1326 audit(1755901395.075:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9726 comm="syz.3.989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe5878ebe9 code=0x0 [ 460.184185][ T9744] program syz.0.993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.202642][ T9754] netlink: 'syz.0.996': attribute type 10 has an invalid length. [ 461.270636][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.303263][ T9754] bridge_slave_1: left allmulticast mode [ 461.303967][ T1212] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 461.362555][ T9754] bridge_slave_1: left promiscuous mode [ 461.386301][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.500450][ T1212] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.535110][ T9754] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 461.561313][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 461.580475][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 461.612298][ T1212] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.648494][ T1212] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.669600][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 461.783028][ T9765] mkiss: ax0: crc mode is auto. [ 462.971876][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.787111][ T1212] usb 4-1: config 0 descriptor?? [ 463.792970][ T9750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 464.266729][ T1212] usbhid 4-1:0.0: can't add hid device: -71 [ 464.272783][ T1212] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 464.302282][ T1212] usb 4-1: USB disconnect, device number 30 [ 464.509326][ T9775] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1003'. [ 464.805484][ T9781] cifs: Unknown parameter 'group_id' [ 464.823980][ T9784] ALSA: mixer_oss: invalid OSS volume 'Xh8^' [ 464.836786][ T9784] ALSA: mixer_oss: invalid OSS volume 'p' [ 464.889081][ T9788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1005'. [ 465.137000][ T1212] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 465.717676][ T1212] usb 2-1: config 0 has an invalid interface number: 206 but max is 1 [ 466.281428][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.298330][ T1212] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 466.307336][ T1212] usb 2-1: config 0 has no interface number 0 [ 466.313476][ T1212] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 466.324493][ T1212] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 466.336241][ T1212] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0x8C has invalid maxpacket 30768, setting to 64 [ 466.347788][ T1212] usb 2-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 466.361661][ T1212] usb 2-1: config 0 interface 206 has no altsetting 0 [ 466.370933][ T1212] usb 2-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 466.385665][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.393692][ T1212] usb 2-1: Product: syz [ 466.411036][ T1212] usb 2-1: Manufacturer: syz [ 466.424123][ T1212] usb 2-1: SerialNumber: syz [ 466.449168][ T1212] usb 2-1: config 0 descriptor?? [ 466.646809][ T9777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 466.762107][ T9799] Cannot find add_set index 0 as target [ 466.875710][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 466.883463][ T5916] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 466.883909][ T1212] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 466.966924][ T1212] usb 2-1: USB disconnect, device number 33 [ 467.020649][ T9819] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.042202][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.054752][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 467.070470][ T5916] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 467.080390][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.098197][ T5916] usb 4-1: config 0 has no interface number 0 [ 467.107013][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 467.120880][ T5916] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 467.141205][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.151273][ T5916] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 467.171011][ T5916] usb 4-1: config 0 interface 41 has no altsetting 0 [ 467.178764][ T9] usb 5-1: config 0 descriptor?? [ 467.202801][ T5916] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 467.225130][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.250044][ T5916] usb 4-1: Product: syz [ 467.256071][ T5916] usb 4-1: Manufacturer: syz [ 467.260754][ T5916] usb 4-1: SerialNumber: syz [ 467.277066][ T9819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.286927][ T5916] usb 4-1: config 0 descriptor?? [ 467.292803][ T9807] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 467.297640][ T9819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.300388][ T9807] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 467.501881][ T9819] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.531556][ T9819] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.550138][ T5916] dm9601 4-1:0.41: probe with driver dm9601 failed with error -71 [ 467.561475][ T9819] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.562225][ T5916] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 467.581451][ T9819] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.626037][ T5916] usb 4-1: USB disconnect, device number 31 [ 467.829103][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 468.169735][ T10] lo speed is unknown, defaulting to 1000 [ 468.257977][ T10] syz0: Port: 1 Link DOWN [ 468.611297][ T9] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 468.699799][ T9821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 468.705982][ T9] usb 5-1: USB disconnect, device number 31 [ 468.769353][ T9821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 468.815134][ T9821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 468.830681][ T9821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 468.846838][ T9821] geneve2: entered promiscuous mode [ 468.871413][ T9821] geneve2: entered allmulticast mode [ 471.296298][ T5896] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 471.986118][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 472.501114][ T5896] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 472.545718][ T5896] usb 6-1: config 0 has no interface number 0 [ 472.557243][ T5896] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.569952][ T5896] usb 6-1: config 0 interface 85 has no altsetting 0 [ 472.611217][ T5896] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 472.624846][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.633892][ T5896] usb 6-1: Product: syz [ 473.111823][ T5896] usb 6-1: Manufacturer: syz [ 473.128779][ T5896] usb 6-1: SerialNumber: syz [ 473.136111][ T9874] program syz.4.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.152797][ T5896] usb 6-1: config 0 descriptor?? [ 473.215283][ T9879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1034'. [ 473.325567][ T9887] netlink: 'syz.3.1038': attribute type 11 has an invalid length. [ 473.334916][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 474.495003][ T5896] appletouch 6-1:0.85: Failed to read mode from device. [ 475.164209][ T5896] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 475.999206][ T5896] usb 6-1: USB disconnect, device number 24 [ 476.151581][ T9904] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1041'. [ 479.885931][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 480.095836][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 480.112165][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 480.245666][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 480.291228][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 480.379049][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 480.435822][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.478598][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 480.489987][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.738287][ T9] usb 5-1: usb_control_msg returned -32 [ 480.772766][ T9] usbtmc 5-1:16.0: can't read capabilities [ 480.910688][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.918026][ T9937] bridge0: port 1() entered disabled state [ 480.959303][ T9937] bridge0: entered allmulticast mode [ 481.010989][ T9938] bridge_slave_1: left allmulticast mode [ 481.032738][ T9938] bridge_slave_1: left promiscuous mode [ 481.419481][ T9938] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.577394][ T9938] : left allmulticast mode [ 481.582077][ T9938] : left promiscuous mode [ 481.592570][ T9938] bridge0: port 1() entered disabled state [ 482.094810][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.126058][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.975754][ T43] usb 5-1: USB disconnect, device number 32 [ 486.275688][ T9133] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 486.438570][ T9133] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 486.460879][ T9133] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 486.515687][ T9133] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.548186][ T9133] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 486.731358][ T9133] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 486.738886][ T9990] netlink: 'syz.0.1065': attribute type 4 has an invalid length. [ 486.750817][ T9133] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 486.758696][ T9133] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 486.781511][ T9133] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.885869][ T9133] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 487.065835][ T9133] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 487.096256][ T9133] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 487.103824][ T9133] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 487.114576][ T9133] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 487.138843][ T9133] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 487.173364][ T9994] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 487.687862][ T9133] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 487.709726][ T9133] usb 5-1: string descriptor 0 read error: -22 [ 487.718221][ T9133] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 487.748156][ T9133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.873714][ T9133] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 487.995105][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 487.997036][ T9133] usb 5-1: USB disconnect, device number 33 [ 491.087553][ T5853] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 491.087640][ T5853] Bluetooth: hci4: Malformed LE Event: 0x02 [ 493.999286][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 496.214344][T10077] capability: warning: `syz.5.1092' uses 32-bit capabilities (legacy support in use) [ 496.684147][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 499.467685][T10106] netlink: 'syz.4.1101': attribute type 7 has an invalid length. [ 499.516427][T10106] : entered promiscuous mode [ 501.407278][ T5896] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 501.545282][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.557791][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.560293][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 502.594871][ T5896] usb 4-1: device descriptor read/all, error -71 [ 503.347004][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 503.364201][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 503.407494][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 503.432290][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 503.450173][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 503.981673][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 504.056084][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 504.442661][ T9] usb 5-1: Product: syz [ 504.465748][ T9] usb 5-1: Manufacturer: syz [ 504.516279][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 504.524740][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 504.533413][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 504.539978][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 504.987398][ T9] usb 5-1: USB disconnect, device number 34 [ 506.436069][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 506.596353][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 506.623848][ T9] usb 6-1: config 0 has no interfaces? [ 506.675091][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 506.732155][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.814407][ T9] usb 6-1: Product: syz [ 506.860389][ T9] usb 6-1: Manufacturer: syz [ 506.911295][ T9] usb 6-1: SerialNumber: syz [ 507.124882][ T9] usb 6-1: config 0 descriptor?? [ 507.336288][T10179] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 507.348117][T10179] CUSE: unknown device info "3ܟ,̘" [ 507.354007][T10179] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 507.354007][T10179] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 507.372941][T10179] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 507.384273][T10179] CUSE: DEVNAME unspecified [ 507.456639][ T30] audit: type=1326 audit(1755901443.255:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10174 comm="syz.4.1119" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d2ad8ebe9 code=0x0 [ 509.315835][ T9] usb 6-1: USB disconnect, device number 25 [ 509.453290][T10205] IPVS: Error connecting to the multicast addr [ 509.495503][T10205] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1128'. [ 509.526522][T10205] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1128'. [ 509.776584][ T43] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 510.906239][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.926184][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 510.937538][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 510.947572][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 510.965689][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.974784][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.008475][ T43] usb 4-1: config 0 descriptor?? [ 512.310316][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 512.407336][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 512.441622][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 512.505466][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 512.545906][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 512.579182][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 512.627909][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 512.652270][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 512.836562][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 512.855693][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 512.888984][ T43] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 513.713067][ T43] usb 4-1: USB disconnect, device number 34 [ 513.955787][ T9133] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 514.185688][ T9133] usb 2-1: Using ep0 maxpacket: 8 [ 514.203187][ T9133] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 514.214129][ T9133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 514.227876][ T9133] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 514.241532][ T9133] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 514.256452][ T9133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.270209][ T9133] usb 2-1: config 0 descriptor?? [ 514.563767][ T43] usb 2-1: USB disconnect, device number 34 [ 516.118484][ T9] IPVS: starting estimator thread 0... [ 516.134423][T10278] tipc: Started in network mode [ 516.146047][T10278] tipc: Node identity ac1414aa, cluster identity 4711 [ 516.156132][T10278] tipc: Enabled bearer , priority 10 [ 516.156257][T10279] netlink: 'syz.4.1154': attribute type 4 has an invalid length. [ 516.216076][T10280] IPVS: using max 30 ests per chain, 72000 per kthread [ 517.267521][ T9] tipc: Node number set to 2886997162 [ 518.897407][ T1212] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 519.239955][T10310] sctp: [Deprecated]: syz.1.1161 (pid 10310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.239955][T10310] Use struct sctp_sack_info instead [ 519.423305][ T5853] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 519.423370][ T5853] Bluetooth: hci0: Unknown advertising packet type: 0x72 [ 519.437578][ T5853] Bluetooth: hci0: Malformed LE Event: 0x0d [ 519.627882][ T1212] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 519.644833][ T1212] usb 5-1: config 0 has no interface number 1 [ 519.662574][ T1212] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 519.673289][ T1212] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 519.690938][ T1212] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 519.703989][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 519.715204][ T1212] usb 5-1: SerialNumber: syz [ 519.723285][ T1212] usb 5-1: config 0 descriptor?? [ 519.740753][ T1212] usb 5-1: Found UVC 0.00 device (0002:0000) [ 519.758739][ T1212] usb 5-1: No valid video chain found. [ 520.158118][ T9] usb 5-1: USB disconnect, device number 35 [ 522.290752][T10337] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 523.845770][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 524.062528][T10355] syzkaller1: entered allmulticast mode [ 524.280574][T10352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.100599][T10380] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 526.845695][ T5916] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 527.005792][ T6005] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 527.019096][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 527.071559][ T5916] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 527.100663][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.122935][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 527.157251][ T5916] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.176794][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.198791][ T6005] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 527.205721][ T5916] usb 1-1: Product: syz [ 527.250637][ T5916] usb 1-1: Manufacturer: syz [ 527.266977][ T5916] usb 1-1: SerialNumber: syz [ 527.312118][ T6005] usb 5-1: config 0 has no interface number 0 [ 527.366522][ T6005] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 527.429810][ T6005] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 527.521804][ T6005] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 527.548012][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.571303][ T6005] usb 5-1: config 0 descriptor?? [ 527.579534][T10386] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 527.604368][ T6005] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 527.703453][ T5916] usb 1-1: 0:2 : does not exist [ 527.827034][ T6005] usb 5-1: USB disconnect, device number 36 [ 527.942756][T10403] netlink: 'syz.3.1195': attribute type 10 has an invalid length. [ 528.343805][T10403] team0: Port device dummy0 added [ 528.624658][ T6005] usb 1-1: USB disconnect, device number 30 [ 529.109542][ T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 529.568447][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 530.217168][ T43] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.237722][ T43] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 530.256381][ T43] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.287982][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 530.812035][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 530.890602][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.937188][ T43] usb 4-1: Product: syz [ 530.983676][ T43] usb 4-1: Manufacturer: syz [ 531.025865][ T43] usb 4-1: SerialNumber: syz [ 531.326006][ T43] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 531.698353][T10438] ubi: mtd0 is already attached to ubi31 [ 532.826064][ T5916] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 532.998509][ T9] usb 4-1: USB disconnect, device number 35 [ 533.047265][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 533.162802][ T5916] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 533.192748][ T9] usblp0: removed [ 533.250255][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.339198][ T5916] usb 2-1: Product: syz [ 533.376612][ T5916] usb 2-1: Manufacturer: syz [ 533.412163][ T5916] usb 2-1: SerialNumber: syz [ 533.510596][ T5916] usb 2-1: config 0 descriptor?? [ 533.798022][ T5916] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 534.982387][ T5916] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 534.994306][ T5916] usb 2-1: USB disconnect, device number 35 [ 535.071101][T10472] syz.0.1219: attempt to access beyond end of device [ 535.071101][T10472] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 535.084287][T10472] SQUASHFS error: Failed to read block 0x0: -5 [ 535.657155][T10472] binder: 10471:10472 ioctl 4018620d 0 returned -22 [ 536.962894][T10487] overlayfs: failed to resolve './file1': -2 [ 537.043732][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 537.985242][T10487] fuse: Unknown parameter 'f' [ 538.126312][T10487] iso9660: Unknown parameter 'gidile0' [ 538.155548][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1224'. [ 538.292740][T10503] loop1: detected capacity change from 0 to 7 [ 538.340365][T10503] Dev loop1: unable to read RDB block 7 [ 538.405390][T10503] loop1: AHDI p4 [ 538.440935][T10503] loop1: partition table partially beyond EOD, truncated [ 539.055987][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 539.325210][T10516] overlay: ./file0 is not a directory [ 540.400372][T10523] [ 540.401002][ T30] audit: type=1800 audit(1755901476.255:322): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1230" name="/" dev="fuse" ino=1 res=0 errno=0 [ 540.402731][T10523] ====================================================== [ 540.428074][T10523] WARNING: possible circular locking dependency detected [ 540.435110][T10523] 6.16.0-syzkaller #0 Not tainted [ 540.440122][T10523] ------------------------------------------------------ [ 540.447151][T10523] syz.1.1230/10523 is trying to acquire lock: [ 540.453194][T10523] ffff888025365988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 540.464243][T10523] [ 540.464243][T10523] but task is already holding lock: [ 540.471599][T10523] ffff888025365a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 540.480481][T10523] [ 540.480481][T10523] which lock already depends on the new lock. [ 540.480481][T10523] [ 540.490870][T10523] [ 540.490870][T10523] the existing dependency chain (in reverse order) is: [ 540.499876][T10523] [ 540.499876][T10523] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 540.507690][T10523] lock_acquire+0x120/0x360 [ 540.512719][T10523] __mutex_lock+0x182/0xe80 [ 540.517746][T10523] refcount_dec_and_mutex_lock+0x30/0xa0 [ 540.523910][T10523] nbd_config_put+0x2c/0x790 [ 540.529025][T10523] nbd_release+0xfe/0x140 [ 540.533876][T10523] bdev_release+0x533/0x650 [ 540.538901][T10523] blkdev_release+0x15/0x20 [ 540.543926][T10523] __fput+0x449/0xa70 [ 540.548465][T10523] fput_close_sync+0x119/0x200 [ 540.553747][T10523] __x64_sys_close+0x7f/0x110 [ 540.558960][T10523] do_syscall_64+0xfa/0x3b0 [ 540.563983][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.570393][T10523] [ 540.570393][T10523] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 540.578214][T10523] lock_acquire+0x120/0x360 [ 540.583238][T10523] __mutex_lock+0x182/0xe80 [ 540.588277][T10523] __del_gendisk+0x129/0x9e0 [ 540.593410][T10523] del_gendisk+0xe8/0x160 [ 540.598277][T10523] nbd_dev_remove_work+0x47/0xe0 [ 540.603750][T10523] process_scheduled_works+0xade/0x17b0 [ 540.609820][T10523] worker_thread+0x8a0/0xda0 [ 540.614931][T10523] kthread+0x70e/0x8a0 [ 540.619528][T10523] ret_from_fork+0x3fc/0x770 [ 540.624635][T10523] ret_from_fork_asm+0x1a/0x30 [ 540.629922][T10523] [ 540.629922][T10523] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 540.638354][T10523] validate_chain+0xb9b/0x2140 [ 540.643636][T10523] __lock_acquire+0xab9/0xd20 [ 540.648827][T10523] lock_acquire+0x120/0x360 [ 540.653846][T10523] down_write+0x96/0x1f0 [ 540.658616][T10523] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 540.664856][T10523] nbd_start_device+0x16c/0xac0 [ 540.670227][T10523] nbd_ioctl+0x636/0xeb0 [ 540.674990][T10523] blkdev_ioctl+0x5a8/0x6d0 [ 540.680011][T10523] __se_sys_ioctl+0xfc/0x170 [ 540.685127][T10523] do_syscall_64+0xfa/0x3b0 [ 540.690236][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.696649][T10523] [ 540.696649][T10523] other info that might help us debug this: [ 540.696649][T10523] [ 540.706867][T10523] Chain exists of: [ 540.706867][T10523] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 540.706867][T10523] [ 540.721040][T10523] Possible unsafe locking scenario: [ 540.721040][T10523] [ 540.728477][T10523] CPU0 CPU1 [ 540.733833][T10523] ---- ---- [ 540.739190][T10523] lock(&nbd->config_lock); [ 540.743874][T10523] lock(&disk->open_mutex); [ 540.750979][T10523] lock(&nbd->config_lock); [ 540.758087][T10523] lock(&set->update_nr_hwq_lock); [ 540.763280][T10523] [ 540.763280][T10523] *** DEADLOCK *** [ 540.763280][T10523] [ 540.771410][T10523] 1 lock held by syz.1.1230/10523: [ 540.776520][T10523] #0: ffff888025365a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 540.785861][T10523] [ 540.785861][T10523] stack backtrace: [ 540.791769][T10523] CPU: 0 UID: 0 PID: 10523 Comm: syz.1.1230 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 540.791790][T10523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.791807][T10523] Call Trace: [ 540.791817][T10523] [ 540.791825][T10523] dump_stack_lvl+0x189/0x250 [ 540.791848][T10523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.791865][T10523] ? __pfx__printk+0x10/0x10 [ 540.791887][T10523] ? print_lock_name+0xde/0x100 [ 540.791908][T10523] print_circular_bug+0x2ee/0x310 [ 540.791931][T10523] check_noncircular+0x134/0x160 [ 540.791953][T10523] validate_chain+0xb9b/0x2140 [ 540.791971][T10523] ? trace_sched_exit_tp+0x38/0x120 [ 540.791996][T10523] ? __schedule+0x16c8/0x4c90 [ 540.792018][T10523] __lock_acquire+0xab9/0xd20 [ 540.792036][T10523] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 540.792058][T10523] lock_acquire+0x120/0x360 [ 540.792072][T10523] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 540.792096][T10523] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 540.792125][T10523] down_write+0x96/0x1f0 [ 540.792144][T10523] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 540.792166][T10523] ? __pfx_down_write+0x10/0x10 [ 540.792185][T10523] ? rcu_is_watching+0x15/0xb0 [ 540.792204][T10523] ? __mutex_lock+0xa6d/0xe80 [ 540.792223][T10523] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 540.792247][T10523] ? nbd_ioctl+0x131/0xeb0 [ 540.792269][T10523] ? __pfx___mutex_lock+0x10/0x10 [ 540.792288][T10523] nbd_start_device+0x16c/0xac0 [ 540.792310][T10523] ? security_capable+0x7e/0x2e0 [ 540.792334][T10523] nbd_ioctl+0x636/0xeb0 [ 540.792357][T10523] ? __pfx_nbd_ioctl+0x10/0x10 [ 540.792376][T10523] ? __asan_memset+0x22/0x50 [ 540.792398][T10523] ? smack_file_ioctl+0x24a/0x340 [ 540.792414][T10523] ? __pfx_smack_file_ioctl+0x10/0x10 [ 540.792430][T10523] ? __pfx_nbd_ioctl+0x10/0x10 [ 540.792451][T10523] blkdev_ioctl+0x5a8/0x6d0 [ 540.792471][T10523] ? __pfx_blkdev_ioctl+0x10/0x10 [ 540.792489][T10523] ? __fget_files+0x2a/0x420 [ 540.792513][T10523] ? bpf_lsm_file_ioctl+0x9/0x20 [ 540.792532][T10523] ? __pfx_blkdev_ioctl+0x10/0x10 [ 540.792551][T10523] __se_sys_ioctl+0xfc/0x170 [ 540.792576][T10523] do_syscall_64+0xfa/0x3b0 [ 540.792594][T10523] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.792611][T10523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.792627][T10523] ? clear_bhb_loop+0x60/0xb0 [ 540.792645][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.792661][T10523] RIP: 0033:0x7f3bcc58ebe9 [ 540.792677][T10523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.792693][T10523] RSP: 002b:00007f3bc9fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.792711][T10523] RAX: ffffffffffffffda RBX: 00007f3bcc7b6360 RCX: 00007f3bcc58ebe9 [ 540.792724][T10523] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 540.792734][T10523] RBP: 00007f3bcc611e19 R08: 0000000000000000 R09: 0000000000000000 [ 540.792745][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.792755][T10523] R13: 00007f3bcc7b63f8 R14: 00007f3bcc7b6360 R15: 00007ffef41ed3f8 [ 540.792775][T10523] [ 541.096822][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.198364][ T5853] block nbd1: Receive control failed (result -32) [ 541.269372][T10506] syz.3.1227 (10506): drop_caches: 2 [ 541.287541][T10523] block nbd1: shutting down sockets